Adversaries may collect point and tag values to gain a more comprehensive understanding of the process environment. Points may be values such as inputs, memory locations, outputs or other process specific variables. (Citation: Dennis L. Sloatman September 2016) Tags are the identifiers given to points for operator convenience. Collecting such tags provides valuable context to environmental points and enables an adversary to map inputs, outputs, and other values to their control processes. Understanding the points being collected may inform an adversary on which processes and values to keep track of over the course of an operation.

Linked Issues

Issuelinks
Linktyp Issue
is related to Techniques
is related to Remote Terminal Unit (RTU)
is related to Distributed Control System (DCS) Controller
is related to Data Gateway
is related to Safety Controller
is related to Control Server
is related to Human-Machine Interface (HMI)
is related to Intelligent Electronic Device (IED)
is related to Data Historian
is related to Programmable Automation Controller (PAC)
is related to Programmable Logic Controller (PLC)
is blocked by Authorization Enforcement
is blocked by Network Allowlists
is blocked by Detection of Point & Tag Identification
is blocked by Filter Network Traffic
is blocked by Human User Authentication
is blocked by Software Process and Device Authentication
is blocked by Access Management
is blocked by Network Segmentation
is blocked by Communication Authenticity
Impressum Deutsch Englisch